News for hackers. Stuff that matters.
Re:Has anyone built their own authentication system? by deedasmi on Saturday July 20, 2024 @01:17AM (#41014268)
Bonus points, store meta data about the hash algorithm. That way if you ever need to change it in the future due to a weakness in the algorithm you can validate the password against old metadata and rehash with new metadata and update the record.
Re:Has anyone built their own authentication system? by toast0 on Saturday July 20, 2024 @01:38AM (#41014342)
Many of the popular password hashes include metadata in the default output already. bcrypt certainly does.
Re:Has anyone built their own authentication system? by asyx on Saturday July 20, 2024 @04:09AM (#41014927)
Argon2 as well. Most libraries give you a string that contains all the parameters it needs for hashing.